Re: AW: ldap groups in 1.0.0 RC1

2019-01-15 Thread ek1m92
I seem to be running into either the same or a very similar problem (running guacamole 1.0.0 but my understanding is that this is identical to the RC): Authentication succeeds without any modification to the source, but from this point on, the behavior I'm seeing seems to be identical. Here are

AW: ldap groups in 1.0.0 RC1

2019-01-14 Thread Philip Herbert
Betreff: Re: ldap groups in 1.0.0 RC1 On Mon, Jan 14, 2019 at 12:37 PM Philip Herbert mailto:m...@pherbert.de>> wrote: Hello, I have now created a testuser who is also member in one group. The user himself has a connection assigned, and one connection is assigned to the Tes

Re: ldap groups in 1.0.0 RC1

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019 at 12:37 PM Philip Herbert wrote: > > Hello, > > I have now created a testuser who is also member in one group. > > The user himself has a connection assigned, and one connection is assigned > to the TestGroup > > with the modification oft the function getGroupSearchFilter,

AW: ldap groups in 1.0.0 RC1

2019-01-13 Thread Philip Herbert
Jumper Gesendet: Sonntag, 13. Januar 2019 22:47 An: user@guacamole.apache.org Betreff: Re: ldap groups in 1.0.0 RC1 On Sun, Jan 13, 2019 at 12:29 PM Philip Herbert mailto:m...@pherbert.de>> wrote: for some reason I do not understand, I can not enable debug logging. I have added the logba

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 16:48 Mike Jumper wrote: > On Sun, Jan 13, 2019 at 11:23 AM Nick Couchman wrote: > >> On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: >> >>> as it seems impossible to change the structure of an ldap, because a >>> single application expects users and groups >>>

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Mike Jumper
On Sun, Jan 13, 2019 at 11:23 AM Nick Couchman wrote: > On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: > >> as it seems impossible to change the structure of an ldap, because a >> single application expects users and groups >> >> In different parts oft the ldap directory, I would like to

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Mike Jumper
On Sun, Jan 13, 2019 at 12:29 PM Philip Herbert wrote: > for some reason I do not understand, I can not enable debug logging. > > I have added the logback.xml to /etc/gucamamole (where > guacamole.properties is located) > > > > startup in catalina.out show > > > > Loading logback configuration

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: > as it seems impossible to change the structure of an ldap, because a > single application expects users and groups > > In different parts oft the ldap directory, I would like to try to find out > why this config is failing > We certainly

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
46 [http-bio-8080-exec-7] WARN > o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: > Permission denied. > > 13:39:12.699 [http-bio-8080-exec-5] ERROR > o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to > guacd failed: Permission

AW: ldap groups in 1.0.0 RC1

2019-01-13 Thread Philip Herbert
t rejected: Permission denied. Connections assigned to the user (not the group) are still working fine, as the did in previous versions. Thanks, Philip Von: Mike Jumper Gesendet: Sonntag, 6. Januar 2019 08:47 An: user@guacamole.apache.org Betreff: Re: ldap groups in 1.0.0 RC1 On Sat, Jan 5, 2

Re: ldap groups in 1.0.0 RC1

2019-01-05 Thread Mike Jumper
On Sat, Jan 5, 2019, 16:49 Philip Herbert ... > > Because of global catalogue port(3269), all users in the entire directory > are returned and shown in Users, independant from the ou. > Are you saying your LDAP server ignores the base DN for queries? > ... > >

ldap groups in 1.0.0 RC1

2019-01-05 Thread Philip Herbert
Hello, I am trying to get ldap groups up and running when using in combination with mysql extension. Without groups the config used so far for older versions works fine: Because of global catalogue port(3269), all users in the entire directory are returned and shown in Users, independant from